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Amendments to the Claims; 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Ustino of Claims; 



1 . (cancelled) 

2. (previously presented) A method as described In claim 14 wherein said 
publicly known manner for deriving an integer from said published information 
comprises applying a hashing function to said message M. 

3. (original) A method as described in daim 2 wherein said message M 
includes information lAV identifying said digital postage meter and operating parameters 
applic^le to said digital postage meter. 



4. (original) A method as described in claim 2 wherein said message M 
includes information lAV identifying said digital postage meter and operating parameters 
applicable to said digital postage meter. 

5. (previously presented) A method as described in daim 14 wherein said 
group [P] is defined on an elliptic cun^e. 

6. (previously presented) A method as described In claim 1 4 wherein said 
message M indudes Information tying said postage meter's public key KeyoM*? to said 
infbmnation lAV. 

7. (currently amended ) A aitide having an indicium imprinted thereon 
as evidence of attributes of said article, said indk:ium con^tprising: 
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a) a signature generated with a private key of a first party; 

b) a certificate; 

Information specifying attributes of said article; wiierein 



d) said private key of said first party is generated as a function of said 
certificate, said information, and a private key of a certifying authority, said function 
being chosen so that a party wishing to verify saW indicium can determine a public key 
corresponding to said private key of said first party by operating on said certificate and 
said information vwth a corresponding public key of said certifying authority. 

8. (canceled) 



9, (canceled) 

1 0. (previously presented) A method for certification by a certifying authority of a 
public key of a digital postage meter, said digital postage meter producing indicia signed 
with a coresponding private key of saW digital postage meter, said certifying authority 
having a published public key and a corresponding private key, said method comprising 
the steps of: 

a) said certifying authority providing said meter with an integer, said integer being 
a first function of said private key of said authority; 

b) said meter computing a digital postage meter private key as a second function 
of said Integer; arKi 

c) said certifying authority publishing related information; wherein 

d) said first function, said second function and said published related 
infomiatlon are chosen so that a party seeking to verify said indicia can compute said 
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digital postage meter public key by operating on said published related information with 
said published public key of said authority. 

1 1 . (original) A method as described in claim 1 0 wherein said published related 
Information includes Infonnatton identifying said digital postage meter and operating 
parameters applicable to said digital postage meter. 

1 2. (original) A method for certificatton by a certifying authority of a public key of 
a digital postage meter, said digital postage meter producing indrcia signed with a 
corresponding private key of saW digital postage meter, saki certifying authority having 
a published public key and a corresponding private key, said method comprising the 

I steps of: 



a) said certifying authority providing a user with an integer, said integer 
being a first function of said private key of said authority; 

b) said user computing a digital postage meter private key as a second 
function of said integer and downloading said postage meter private key to said digital 
postage meter; and 



infbmriation ate chosen so that a party seeking to verify said indicia can compute said 
digital postage meter public key by operating on said published related information with 
said published public key of said authority. 

1 3. (original) A method as described in claim 1 2 wherein said published 
related Infomiation includes information identifying said digital postage meter and 
operating parameters applicable to said digital postage meter. 




c) said certifying authority publishing related information; wherein 



d) said first function. sakJ second function and said published related 
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1 4. (currently amended) A method for controHIng, and distributing information 
k)etween a digital postage meter and a certifying station operated by a certifying 
authority CA for publishing information, so that a public key KeyoM'P of said digital 
postage meter can be detemiined by a party seeking to verify indicia printed by sakj 
digital postage meter from said published information with assurance that said public 
key KeyDM*P has been certified by said certifying authority CA, said method comprising 
the steps of: 

a) defining and publishing a finite group [P] with a binary operation [+] and 
publishing a particular point P in said group; 

b) defining and publishing a binary operation K*p, where K Is an integer and p is 
a point in said group, such that K*p is a point in said group computed by applying said 
operation [+] to K copies of said point p , and computat i on of K from knowlodgo of th e 
def i nition of oaid group [P], paid point p, and K*p lo hard ; 

c) controlling a certifying statton to publish a certificate OMCpM for said digital 
postage meter, wherein; 

OMCdm = (rDM + rcA)*P: and wherein 
roM is a random integer generated by said digital postage meter and rcA is a random 
integer generated by said certifying station; 

d) controlling said certifying station to publish a message M; 

e) controlling said certifying station to generate an integer Idm , and send said 
Integer to said digital postage meter, wherein; 

Idm = rcA+ H(M)KeycA; and wherein 
H(M) is an Integer derived from said message M in accordance with a publicly known 
algorithm H and KeycA is a private key of said certifying authority CA; 

f) publishing a public key KeycA*P for said certifying authority CA; and 
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g) controlling said digital postage meter to compute a private key KeyoM. 

KeyoM = roM + Idm = Tdm + rcA+ H(M)KeycA: and 

h) controlling said digital postage meter to print an indicium and digitally sign said 
indicium with said key KeyoMl whereby 

i) said verifying party can compute said user's public key KeyDM*P as 
KeyoM'P = OMCdm + H(M) KeycA*P = 
(rDM+rcA)*P + H(M)KeycA*P 

from knowledge of H, M, [P], said public key KeycA*P, and OMCdm. 

1 5. (currently amended) A method for controlling a digital postage meter to 
print Indicia signed with a private key Keyom based upon a published a finite group [P] 
with a binary operation [+] and a published particular point P in said group and a 
published a binary operation K*p, where K is an integer and p is a point in said group, 
such that K*p is a point in said group computed by applying said operation [+] to K 
copies of said point p. and computat i on of K from know l odgo of tho def i nition of oa l d 
group [PI, i saki po i nt p, and K'^p i s hard, so that a public key KeyDM*P said digital 
postage meter can be determined by a party seeking to verify indicia printed by said 
digital postage meter from published information with assurance that said public key 
KeyoM*P has been certified by a certifying authority CA. said method comprising the 
steps of: 

a) controlling said digital postage meter to generate a random number roM and 
send a point roM*P to a certifying station; 

b) controlling said digital postage meter to receive a certificate OMCdm from a 
certifying station operated by said certifying authority CA, wherein: 

OMCdm = (roM + rcA)*P: and wherein 
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Tdmis a random integer generated by said digital postage meter and rcAis a random 
integer generated by said certifying station; 

c) controlling said digital postage meter to receive an Integer Iom from said 
certifying station, wherein; 



M is a message published by said certifying station and H(M) is an integer derived from 
said message M in accordance with a publicly known algorithm H and KeycA is a private 
key of said certifying authority CA; 

d) controlling said digital postage meter to compute a private key KeyoM. 



e) controlling said digital postage meter to print an indicium and digitally sign said 
indicium with said key KeyoMl whereby 

f) said verifying party car^ compute said digital postage meter public key Keyow'P 

as 

KeyDM*P = OMCdm + H(M) KeycA*P = 
(rDM+rcA)*P + H(M)KeycA*P 
from knowledge of H. M, [P], said public key KeycA*P, and OMCdm- 

1 6. (currently amended ) A method for controlling a certifying station operated 
by a certifying authority CA to publish information relating to a digital postage meter for 
printing indicia signed with a private key Keyow based upon a published a finite group 
[P] with a binary operation [+] and a published particular point P in said group and a 
published a binary operation K*P, where K is an Integer and p is a point in said group, 
such that K*p is a point in said group computed by applying said operation [+] to K 
copies of said point p, and computat i on of K from know l odgo of tho dofinlt i on of s aid 
group [P], paid po i nt p, and K*p i o hard, so that a public key Keyoiu'^P of said digital 
postage meter can be detemnined by a party seeking to verify indicia printed by said 



PAGE 10/22 ' RCVD AT 1/15/20(14 11:41:12 AM [Eastern Standard rime] * SVR:USPTO-EF)(RF-1/0 * DNIS:8729306 * CSID:2I)3 924 3919 ' DURATION (mm-ss):0S-16 



Idm = rcA+ H(M)KeycA: and wherein 




KeyoM = roM + Idm = row + rcA+ H(M)KeycA: and 





JPIN 15 2004 11:41 FR INTELLECTUAL PR0'PERTY3 324 3919 TO 917038729306 P. 11 

Appln. No.: 09/280.528 

Amdt. Dated January 15. 2004 

Reply to Office Action dated January 6, 2004 

digital postage metor from said published Information with assurance that said public 
kdy KeyoM'P has been certified by a certifying authority CA, said method comprising the 
steps of: 

a) controlling said certifying station to receive a point TomP ^om said digital 
postage meter, where roM is a random number generated by said digital postage meter. 

b) controlling said certifying station to generate and send to said digital postage 
meter a certificate OMCdm. wherein; 

OMCdm = (rDM+ rcA)*P; and wherein 
rcA is a random integer generated by said certifying station; 




c) controlling said certifying station to generate and send to said digital postage 
meter an integer Idm. wherein; 

Idm = rcA-i- H(M)KeycA; and wherein 



M is a message published by said certifying station and H(M) is an integer derived from 
said message M in accordance with a publicly known algorithm H and KeycA is a private 
key of said certifying authority CA; whereby 

d) said digital postage meter can compute said private key KeyoMi 

KeyDM= roM+lDM-rDM + rcA^-H(M)KeyoA;and 
and digitally sign said indicium with said key KeyoM; and whereby 

e) said verifying party can compute said digital postage meter publte key KeyoM^P 

as 

KeyoM'P = OMCdm + H(M) KeycA*P = 
(rDM+rcA>*P + H(M)Keyc:A*P 
from knowledge of H, M, [P], said public key KeycA'P. and CERTdm. 

1 7. (currently amended ) A method for controlling, and distributing information 
among a user station, a digital postage meter and a certifying station operated by a 
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certifying authority CA for publishing information, so that a public key Keyso*P of said 
digital postage meter can be determined by a party seeking to verify Indicia printed by 
said digital postage meter from said published Information with assurance that said 
public key Koy5o*P has been certified by said certifying authority CA. said method 
comprising the steps of: 

a) defining and publishing a finite group [P] with a binary operation [+] and 
publishing a particular point P in said group; 

b) defining and publishing a binary operation K*p, where K is an integer and p is 
a point in said group, such that K*p is a point in said group computed by applying said 
operatton [+] to K copies of said point p . and computat i on of K from knowlodgo of th e 
dofln i t i on of oa i d group [P], oa i d point p, and K*p is hard ; 

c) controlling a certifying station to publish a certificate OI^Cso for said digital 
postage meter, wherein; 

OMCso = (rso + rcA)*P: and wherein 
rso is a random integer generated by said digital postage meter and rcA is a random 
integer generated by said certifying station; 

d) controlling said certifying station to publish a message M; 

e) controlling said certifying station to generate an integer Uo , and send sakJ 
integer to said user station , wherein; 

I50 = rcA+ H(M)KeycA: and wherein 
H(M) is an integer derived from said message M in accordance with a publicly known 
algorithm H and KeycA is a private key of said certifying authority CA; 

f) publishing a public key KeycA*P for said certifying authority CA; and 

g) controlling said user station to compute a private key Keyeo, 

(iM2(»».uPa9e 9 of 17 

PAGE 12122 ' RCVD AT 1/1SI20(I4 11:41:12 AM [Eastern Standard Time] * SVR:USPTO-EFXRF-1/0 * DNIS:87293(I6 *CSID:203 924 3919' DURATION (min-ss):0S-16 



JftN 15 2004 11:41 FR INTELLECTUfiL PR0PERTY3 924 3919 TO 917038729306 P 

Appln. No.: 09^80,528 

Amdt. Dated January 15, 2004 

Reply to OffiCG Action dated January 6, 2004 

Keyso- r5o+l50 = r5o + rcA+H(M)KeycA:and 

h) transmitting said l<ey Keysoto said postage meter, whereby 

i) said digital postage meter can print an indicium and digitally sign said indicium 
with said key Keyso; and whereby 

i) said verifying party can compute said user's public key Key5o*Pas 
Keyso'P = OMCeo + H(M) KeycA"P = 
(rso +rcA)*P + H(M)KeycA*P 
from knowledge of H, M, [P], said puWlo key KeycA*P. and OMCso- 

) 18. (previously presented) A method as described in claim 17 wherein said 

publicly known manner for deriving an integer from said published informatton 
comprises applying a hashing function to said message M. 

1 9. (previously presented) A method as described in claim 1 8 wherein said 
message M includes information lAV identifying said digital postage meter and 
operating parameters applicable to said digital postage meter. 

20. (previously presented) A method as described In claim 17 wherein said 
message M includes information lAV identifying said digital postage meter and 
o|3erating parameters applicable to said digital postage meter. 

21 . (previously presented) A method as described in claim 1 7 wherein said 
group [P] is defined on an elliptic curve. 

22. (previously presented) A method as described in claim 1 7 wherein said 
message M includes information tying said postage meter's public key Keyeo^P to said 
infonmation lAV. 
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23. (currently amended) A method for controlling a certifying station operated 
by a certifying authority CA to publish information relating to a digital postage meter for 
printing indicia signed with a private key Keyso based upon a published a finite group [P] 
with a binary operation [+] and a published particular point P In said group and a 
published a binary operation K*p, where K is an integer and p is a point in said group, 
such that K*p is a point in said group computed by applying said operation [+] to K 
copies of said point p, and oomputat i on of K from l <now le dgo of tho definit i on of said 
group [P]) caid po i nt p, and K*p is hard, s o that a public key Keyow'P said digital 
postage meter can be determined by a party seeking to verify indicia printed by said 
digital postage meter from said published information with assurance that said public 
key KeyoM'P has been certified by a certifying authority CA, said method comprising the 
steps of: 

a) controlling said certifying station to receive a point tqmP from a user station, 
where tom is a random number generated by said user station; 

b) controlling said certifying station to generate and send to said user station a 
certificate OMCso. wherein; 

OMCso = (r5o+ rcA)*P; and wherein 
rcA Is a random Integer generated by said certifying station; 

c) controlling said certifying station to generate and send to said user station an 
integer I50, wherein; 

Iso = roA+ H(M)KeycA: and wherein 
M is a message published by said certifying station and H(M) is an integer derived from 
sakl message M in accordance with a publicly known algorithm H and KeycA is a private 
key of said certifying authority CA; whereby 

d) said user station can compute said private key KeyoM. 

Keyso = rso + Uo = tso + tcA+ H(M)KeycA 
and transmit said key Keyso to said digital postage meten whereby 
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e) said digital postage meter can digitally sign said indicium with said key Keyeo; 
and whereby 

f) said verifying party can compute said digital postage meter public key K©y5o*P 

as 

Keyso'P = OMC50 + H(M) KeycA*P = 
(rDM+rcA)*P + H(M)KeycA*P 
from knowledge of H, M, [P], said public key KeycA'P, and CERTdm. 

24. (currently amended) A method for detenfnining a public key KeyoM*P of a 
digital postage meter with assurance that said key KeyoM has been certified by a group 
of one or more certifying authorities CA, said method comprising the steps of: 

a) scanning an Indicium produced by sakl postage meter to obtain a oertifk^ate 
OMCdm for said postage meter, wherein; 

OMCoM = (rpM + 8um(rcAi)rP: and wherein 
roM is a random integer known only to a party generating said key KeyoM and sum(rcAi) 
is a sum of a plurality of random integers tcai, an ith one of said certifying stattons 
generating an ith one of said random integers rcAi: 

b) scanning said indicium produced by said postage meter to obtain a message 
M said message M being published by a certifying station operated by one of saki 
certifying authorities CA; 

c) computing a hash H(M) of said message M in accordance with a 
predetermined hashing function H; 

d) obtaining at least one public key cai'P corresponding to said one or more 
certifying authorities CA, an ith one of said authorities having an Ith one of said keys 
KeycAi; and 
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e) computing said user's public key Keyu*P as 
Keyu*P = CERTu [+1 H(M)sumw(KeyCAi*P )= 
(ru + 8um(rcAi))*P [+] sum(H(M)KeycAi)*P; wherein 

f) a binary operation W is defined on a finite group [P] having a published 
particular point P; and 

g) K*p. Is a second binary operation defined on said group [Pl.where K is an 
Integer and p is a point in said group, such that K*p, is a point In said group computed 
by applying said operation [+] to K copies of said point p . and computat i on of Kfrom 
know l odgo of th e d e finit i on of oaid group [P], o aid po i nt p. and K*p is hard . 

25. (canceled) 

26. (canceled) 

27. (previously amended) A method as described in claim 31 wherein M - 
(e,IAV)> where lAV Is an Identity and attributes value for said postage meter. 

28. (canceled) 

29. (canceled) 

30. (previously amended) A method as described in claim 32 wherein M = 
(e,IAV), where lAV is an identity and attributes value for said postage meter. 

31 . (previously presented) A method of digitally signing a postal indicium 
comprising the steps of: 

a) generating a message m, said message m including indicia data; 
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b) generating a digital signature with message recovery for said message m; and 

c) incorporating said digital signature into said indicium; wherein 

d) said generating step further comprises the substeps of: 

d1) generating a random Integer rs, re < n, where n is the order of a group 
[P] defined on an elliptic curve; 

d2) generating a integer K, 




where K(p) is a mapping of points in [P] onto the integers, and P is a particular 
published point in [P]; 



d3) generating e, 
e = SKEK(m) 

where SKEk is a symmetric Icey encryption algorithm using key K; 

d4) generating H(M), where H is a hashing function and M is a message 
which can be recovered from said indicium; 

d5) generating s = KeyDMH(M) ■»■ rs, 
where KeyoM is the private key of a postage meterwhich produced said indicium; and 

d6) setUng said digital signature for said nf>essage m equal to the pair 

{s.e), 

32. (previously presented) A method of verifying a digital signature of a postal 
indicium comprising the steps of: 

a) recovering a message m from a digital signature of a postal indicium; and 
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b) accepting said signature as valid if said message m is internally consistent; 
wherein 

c) said recovering step further comprises tlie substeps of: 

c1 ) recovering a public l<ey KeyoM*? for a postage meter wiTlch produced 
said indicium; 

c2) obtaining the signature (8,e) of said indicium, where s = KeyDMH{M) 
+rsand e = SKEK(m). where SKEk is a symetric key encryption algorithm using Icey K, m 
/ is Indicia data, and M is a nr^ssage recoverable from said indicium; 



where [-] is the inverse of [i-]; 

c5) generating 

K = K(rs*P) 

where K(p) is a mapping of points in [P] onto the integers, and P is a particular 
published point in [P]; 

c6) generating 

m = SKE\(e) 
where SKEV is the inverse of SKEk. 




c3) obtaining M from said indicium; 



c4) generating 

8*P [■] H(IVI)KeyoM*P = 

H(IW)KeyDM*P W rs*P [•] H(M)KeyDM*P = 
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